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yp-Kif:^ :topc^ilio^yyy^^ 

15 iSl0^ti^SAt5 o t^) 

[00 2 4] ^fc, r^LTii^cillO^L 
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sfcE«r-efe5i# (s s o : yes) . mat-r^^-r 
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JOSf*, El 7 ^^-r^Jilgr^Ufi 1 £H£o £i\ 77r> 
a^^ey l 2 ft con — K^Jv-^M^4 3(:n- 
K^T-^— ^^»iW$nTV^5^ : g : ^Sr«ISE'r5 (SI 
15 1 0) o ^(D^<omm. n-K5£T^-^a*:E«(c» 
Jltt£;h/C^S£#J* (S 1 2 0 : YE S) , ^-fy7 P P 
^7^P 74 0Ki>tti-51^^y ^£3gfH"5 (S 

i 3 o) o -tit, ^^fyyn^7A^yr4 o©^ 
^ s/ ^»«fifi«4 5 ^ri^< ^ y rtn-tef— 

n-Cv^6^^^^i^Ai:^— SLtv^tfli (S l 4 
0 : YES) , ^SSm^IEStC^b-C^/V-^V^ 
^ttS (SI 5 0) 0 — n-KS7-7-^^iEL< 
^&^^^^TV^^V^i:^J^^t^7 , -c:^ # (S120 :N 
25 O) , M^^y7 P n^7^y74 0icMt6t^f 

0 : NO) , SSei?r^ra^tT^»f>^ 
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[0 0 3 7] ^LT, ^-f, 77r>^*!l 1 2 
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£*b£ e ^LT, l£££*xT^£Itj{1^e- K 
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MS^HtrL (SI 0 0) , f-^^EL< y^n- 

[004 5] #C(C ftufBS 8 0 0i£Xftt>tlZ>s<7 

hL (S8 10) , gffx — ^^^fiE-rs^if 

5^j»rsns (S820) o ^m^—^t^^m^ 

(S 8 2 0 : YE S) s s<7 U/Vtf— h 2 4^b^fff 
— & D iAAyff (S 8 3 0) ft, ^S^^-T-T^o * 
fc, S 8 2 0\£&\,^X&m^—?&&&Vft^kmWr£ 
tltzWrfr (S 8 2 0 : NO) MJ*, ffirfE S 8 1 0 tCTir 

¥«J»r;**L (S8 4 0) , 7-^fift^>fv^^iH7s/ 
^"TS^-e« (S8 4 0 : NO) figlfr-^^o 0 
[0 0 4 6] 7 t —?W%*4^&?^J*TvZfL,tiim& 
(S 8 4 0 : YE S) , x — £V^£r 1 *?tt>f 
>^y^>M (S 8 5 0) , x — 

# r 5 J tO&ofc^if 5^*»J»f*tbS (S 8 6 0) 0 7 

-^#-b^7^v^(offids r 5 j c:*?L< (S8 
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(S 5 9 8:YES) (Cfi, mf|E^9 > n » K^S^ 
^>tt^ 0 — 77 i/^^U K3f— frbv> 

30 ^"A^T'^V^-^ (S 5 9 8 : NO) ftH^>^S 

[0 0 4 9] fipt,, ^ffl^^P J L^-^> KSrgftUfc 
^S^^rfiJSb (S6 10) N P JLPvyK^lf L 
7tm^tC (S610 :YES) , ftu^O^Vn— 
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* NOTICES * 

The Japanese Patent Office is not responsible for any damages caused by the use of this 
translation. 

l.This document has been translated by computer. So the translation may not reflect 
the original precisely. 

2 **** s h ows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[The technical field to which invention belongs] control data, such as a program by 
which this invention controls an operation of electronic equipment, - and It is related 
with the data rewriting equipment equipped with the rewritable nonvolatile storage of 
the flash memory in which the loader program data which control a loading operation of 
control data were stored. A setup in the rewriting mode which enables rewriting of 
loader program data especially is enabled. Only when the rewriting mode is set up, it is 
related with the data rewriting equipment constituted so that the loader program 
storage area of storage might be rewritten according to the loader program data 
transmitted from the external sending set. 



[Description of the Prior Art] In the electronic equipment exported to the former, for 
example, every country in the world, a specification is changed in many cases for every 
country. Moreover, even if it is an exports to the same country, changing a specification 
by difference of a model is also performed. If the technique of producing the control 
board as a thing of exclusive use for every model and country is adopted to the electronic 
equipment which has the specification of such many, the parts mark which should be 
prepared by the manufacturer side will increase. 

[0003] Recently, the method of changing only the program downloaded by using a flash 
memory as a device for a program store there using a flexible control board has come to 
adopt in manufacturing such a control board. More specifically, it is not based on the 
difference in the specification of a country, a model, etc., but the common boot loader 



[0002] 




program (boot loader) is downloaded to the flash memory, and the technique of 
downloading the main program created for every country and model to each flash 
memory is being adopted using this boot loader program. 

[0004] Moreover, after downloading and shipping a main program to a flash memory, 
the need of performing rewriting of the case where a main program is updated, or a boot 
loader may occur. As the update technique of such a main program, and the rewriting 
technique of a boot loader Internet is passed also to overseas by the spread of the 
internets in recently, simply For example, the program for update, Since the boot loader 
program for rewriting can be distributed, from now on The program for two or more 
updates which responded to the country and the model at a manufacturer's homepage, 
The link to the boot loader program for rewriting is prepared, out of the link of this 
plurality The technique a user downloads the program for update corresponding to the 
device which he has, and the boot loader program for rewriting to the personal computer 
of self, and downloads this to electronic equipment is leading. 

[0005] As for the main program or the boot loader program, at this time, it is common 
for it to be updated mechanically or to be rewritten one by one, only with reference to 
the address data attached to each program data, based on the address data, irrespective 
of whether the program is which program. 
[0006] 

[Problem(s) to be Solved by the Invention] However, since update and rewriting of each 
program were simply performed based on address data, when the boot loader program 
data with which an error exists in address data are received, for example according to 
the update technique of a main program in the aforementioned former, and the 
rewriting technique of a boot loader program, a boot loader program is rewritten 
accidentally and serves as things. 

[0007] It will become impossible to rise electronic equipment any longer by the boot 
loader program rewritten accidentally as mentioned above from a boot loader program 
performing the important operation which controls a loading operation of a main 
program in such a case. 

[0008] Although the cure on hardware, for example, the method of performing a 
predetermined setup to the data I/O pin (I/O pin) of storage, exists in order to prevent 
this, such cure technique is complicated. 

[0009] this invention is made in order to cancel the aforementioned conventional trouble, 
and a setup in the rewriting mode which enables rewriting of the loader program data 
which control a loading operation of a main program is enabled. By permitting rewriting 
of the loader program storage area of storage according to the loader program data 



transmitted from the external sending set only when the rewriting mode was set up It 
aims at offering the data rewriting equipment which can be prevented certainly for 
rewriting a boot loader program by the mistake, without taking the measures on 
complicated hardware. 
[0010] 

[Means for Solving the Problem] The data rewriting equipment which relates to this 
invention in order to attain the aforementioned purpose The control data store field 
which stores control data, such as a program which controls an operation of electronic 
equipment In the data rewriting equipment which has the rewritable nonvolatile 
storage with which the loader program storage area which stores the loader program 
data which control a loading operation of the control data to a control data store field at 
the time of the initial load of control data and update was prepared A receiving means to 
receive the aforementioned control data and loader program data which were 
transmitted from the external sending set, A mode setting means to set up the rewriting 
mode which enables rewriting of the aforementioned loader program data, When the 
rewriting mode is set up through the aforementioned mode setting means, it is 
characterized by having the rewriting means which rewrites a loader program storage 
area according to the loader program data received by the aforementioned receiving 
means. 

[00 11] With the data rewriting equipment of the aforementioned this invention, when 
the rewriting mode which enables rewriting of loader program data through a mode 
setting means is set up, a loader program storage area is rewritten according to the 
loader program data received from the external sending set through the receiving 
means. When the rewriting mode is not set up at this time, a loader program storage 
area is not rewritten. 

[0012] Therefore, prevention becomes certainly possible about rewriting a boot loader 
program by the mistake, without attaining rewriting of a loader program and taking the 
measures on hardware more complicated than this, only when it rewrites through a 
mode setting means and the mode is set up. 

[0013] Here to the aforementioned control data and loader program data When address 
data are attached and the rewriting mode is not set up by the aforementioned mode 
setting means It has a decision means to judge whether the data received through the 
receiving means based on the aforementioned address data are control data. When, the 
data received through the aforementioned receiving means are judged to be control data 
by the decision means, as for the aforementioned rewriting means, it is desirable to 
constitute so that the aforementioned control data store field may be rewritten 



according to the received control data. Thereby, update of control data is performed. 
[0014] Moreover, when the data received through the receiving means by the 
aforementioned decision means are judged not to be control data, as for the received 
data, constituting so that it may be read and thrown away is desirable. Since loader 
program data will be accidentally rewritten when address data are mistaken if in such a 
case the received data are loader program data and a loader program storage area is 
rewritten with this loader program data based on the decision result by the decision 
means, processing which reads and throws away the received data is performed. 
[0015] 

[Embodiments of the Invention] The 1 operation gestalt which materialized the data 
storage equipment concerning this invention hereafter is explained in detail, referring 
to a drawing. This operation gestalt is materialized about the multi-function device 
equipped with a facsimile function, printer ability, the copy function, etc., and such a 
multi-function device 10 is equipped with CPU 11, the flash memory 12, RAM13 and 
EEPROM14, the buzzer unit 15, the parallel I / F unit 16, a sign and a decoder 17, the 
printer unit 18, the modem 19, the scanner unit 20, the network control unit (NCU) 21, 
and the control panel 22 as shown in drawing 1 . 

[0016] This multi function device 10 can function as a printer, a copying machine, a 
scanner, etc. besides the function as facsimile, when CPU11 performs the main program 
stored in the flash memory 12 according to the result of the selection of function by the 
control panel 22. 

[0017] The flash memory 12 consists of a boot loader area 30 and a main-program area 
40, as shown in drawing 2 . The boot loader creation stage store field 32 for storing the 
"creation stage data" showing the creation stage of a boot loader program other than the 
boot loader program storage area 31 which stores a boot loader program, and the boot 
loader checksum store field 33 for storing the "checksum data" about a boot loader area 
are set to the boot loader area 30. Moreover, the password store field 42 which stores in 
the main-program area 40 "the model and the password for country identification" other 
than the main-program store field 41 which stores a main program, The completion 
mark store field 43 which stores the "completion mark of a loading" which shows the 
completion of a loading of a main program, The main-program creation stage store field 
44 for storing the "creation stage data" showing the creation stage of a main program 
and the main-program checksum store field 45 for storing the "checksum data" about 
the main-program area 40 are set up. 

[0018] EEPROM14 is for storing informations, such as an one*touch dial which can be 
set up by panel operation of a user. Moreover, the buzzer unit 15 is for outputting 



information sound from a loudspeaker 23 in a different mode by combining the height of 
sound, and a length suitably corresponding to each scenes at the time of the completion 
of a down load of a program, and error occurrence etc. Parallel I / F unit 16 is formed in 
order to exchange data between personal computers through a parallel port 24. A main 
program is downloaded from a personal computer through this parallel I / F unit 16 so 
that it may mention later. Moreover, the multi- function device 10 of the gestalt of this 
operation functions as a printer, when printing data are received from a personal 
computer through this parallel I / F unit 16. 

[0019] In case a sign and the decoder 17 function as facsimile, it is for performing 
processing which encodes the data read in the manuscript in the scanner unit 20 to the 
data for facsimile sending, and processing which decrypts the facsimile data received 
from the exterior in the printer unit 18 to the printing data in which a printout is 
possible. The facsimile data.encoded by this sign and decoder 17 are transmitted by the 
general telephone line 25 through the modem 19 and NCU21. Moreover, through the 
modem 19 and NCU21, the facsimile data received from the general telephone line 25 
are decrypted by the sign and the decoder 17, are sent to the printer unit 18, and are 
printed by the record form. 

[0020] The start key besides the ten key for inputting the telephone number into a 
control panel 22, the stop key, the function selection key, etc. are prepared. By choosing 
a function with this control panel 22, it functions considering this equipment 10 as 
facsimile, a printer, a copying machine, etc. Moreover, it also has the liquid crystal 
display for displaying the input value and the various messages by the ten key etc. in 
this control panel 22. Moreover, by performing depression operation, combining the 
various keys on a control panel 22 suitably, it is enabled to set up and change the 
rewriting mode in which rewriting of the boot loader program storage area 31 is 
permitted so that it may mention later. 

[0021] Next, the procedure which downloads a main program is explained including the 
manufacture technique of this equipment 10 constituted in this way. 
[0022] First, as shown in drawing 3 , the flash memory 12 with which this equipment 10 
is equipped connects the flash memory programmer 50 to work station WS, and 
manufactures the master chip 51 which stored the boot loader program. Then, this 
master chip 51 is set to the flash memory programmer 52, and the copy chips 53 and 53 
and are manufactured. And this copy chip 53 is mounted in the substrate 54 for this 
equipment 10, and this is attached to this equipment 10. 

[0023] Next, the main program created by work station WS is uploaded in a database 56. 
And personal computer PC is connected to this database 56, and a main program is 



downloaded to personal computer PC. In this way, if a main program is downloaded to 
personal computer PC, this PC and this equipment 10 will be connected by the printer 
cable 57, and the power of equipment 10 will be switched on. Then, a boot loader 
program is started and the initial load of a main program is performed so that it may 
mention later. 

[0024] Moreover, to the equipment 10 manufactured in this way, in update of a program 
after supplying a user, as shown in drawing 4 , personal computer PC can be used. A 
manufacturer displays an information on the homepage of self about the offer stage of 
the program for update, technique, etc. The user who looked at this display downloads 
the program for update in personal computer PC of self via internet. And this personal 
computer PC and equipment 10 are connected by the printer cable 57, and a down load 
is performed. Or as other technique, a manufacturer stores the program for update in 
the portable-type storages 58, such as a floppy disk or CDROM, and supplies this to 
each user. Each user sets this storage 58 to personal computer PC of self, and the rest 
performs a down load of the program for update through the printer cable 57 to 
equipment 10 like the case via internet. 

[0025] In addition, this ******************** device 10 has two or more models, and 
main programs differ for every model. Moreover, it is further created about each model 
as that from which a main program is different by ******. However, these main 
programs can all be downloaded using an above-mentioned boot loader program. 
Consequently, with this operation gestalt, the copy chip 53 mounted in the substrate 54 
attached to a product uses a common thing altogether. 

[0026] Here, the main program created by work station WS is constituted by PJL 
command, a fixed character string, a model and the password for country identification, 
a start record, data record, and the last record in an order from the head of data, as 
shown in drawing 5 . 

[0027] PJL command is a command for making CPU 11 recognize that the data which 
follow this command are not printing data but a program. The continuing fixed 
character string is data for making it discriminate that it is a program for this 
equipment 10. 

[0028] Furthermore, the model and the password for country identification which 
continues after that are passwords for discriminating whether the program stored as 
data record is for which countries of which model in this equipment 10. A start record 
and the last record are for discriminating start and an end of a data record field. 
[0029] Data record consists of the attribute field, an address field, a data field, and a 
checksum field. The data for distinguishing the number of data in the data in which it is 



shown that it is data record, and a data field are memorized in an attribute field. The 
data about the store address on the flash memory of the data in a data field are 
memorized by the address field. The data in which the value of the sum adding the data 
of an attribute field, an address field, and a data field is shown are memorized in the 
checksum field. 

[0030] And a thing called a program, a model and the password for country 
identification, the completion mark of a main-program loading, main-program creation 
stage data, and the checksum data of a main-program area is memorized by the data 
field. These ways of being located in a line are missing from the last record side from a 
start record side, and serve as the order of a program, a model and the password for 
country identification, the completion mark of a main-program loading, main-program 
creation stage data, and the checksum data of a main-program area. 
[0031] Next, the content of control processing of this equipment 10 containing the initial 
load of a main program is explained using the flow chart of drawing 6 - view 12 . If 
power is supplied to this equipment 10, processing shown in drawing 6 will be started 
and an initialization of an I/O Port will be performed first (S10). Next, a sum check is 
performed about the boot loader area 30 of a flash memory 12 (S20). And it inspects 
whether when the sum and the checksum which added all the data of an area except the 
checksum data storage field 33 among the boot loader areas 30 are in agreement, it 
judges with it being normal (S30:YES), and RAM13 can operate normally as a device 
continuously (S40). When the check of this RAM13 is also normal (S50:YES), 
main-program area check processing mentioned later is performed (S100). 
[0032] In addition, when the sum-check result of the boot loader area 30 is unusual 
(S30:NO), after setting a boot area rewriting authorization mode flag to ON (S35), it 
shifts to the below-mentioned down-load processing. 

[0033] And when the result of main-program area check processing is normal (S60^YES), 
the below-mentioned main-program running routine is started. On the other hand, 
when the result of the check to the main-program area 40 is unusual, it shifts to 
(S60^NO) and the below -mentioned down-load processing (S200). In addition, when the 
inspection result of RAM13 is unusual, (SSO^NO) and an equipment 
exception-processing routine are started. This equipment exception-processing routine 
directs exchange of a device etc., and predetermined processings, such as a display 
display or a printout of the singing of a buzzer or an error message, are performed. 
[0034] Check processing to a main-program area is performed in the procedure shown in 
drawing 7 . First, it inspects whether the completion mark of a loading is stored in the 
completion mark store field 43 of a loading in a flash memory 12 (S110). As a result of 



this check, when the completion mark of a loading is stored normally, the sum check to 
the (S120^YES) main-program area 40 is performed (S130). And when the checksum 
stored in the sum which added all the data of an area except the checksum data storage 
field 45 among the main-program areas 40, and the checksum store field 45 is in 
agreement, (S140:YES) and an inspection result are set up normally and it escapes from 
this routine (S150). When it judges that it is not surely stored by the completion mark of 
a loading on the other hand (S120^NO), and when it judges that the result of the sum 
check to the main-program area 40 is unusual, (S140^NO) and an inspection result are 
set up unusually and it escapes from this routine (S160). In above-mentioned processing 
of S60, it will be judged based on the inspection result set up by S150 and S160 in this 
way whether a main-program running routine and which routine of down-load 
processing should be started. 

[0035] When a down-load manipulation routine is started, as shown in drawing 8 , it is 
judged whether it is in the status that a down load should be first performed for 
whether it is in the status that a down load should be performed as an initial load as 
update (S210). When judged with NO by S60, processing progresses to S220 after this 
judgment of S210 from it being in the status that it has failed in the initial load. 
[0036] While a mode of operation is set as "0" since it specifies first that it is an initial 
load when judged with an initial load by S210, the deletion flag for making it 
distinguish that no sectors of a flash memory 12 are eliminated is set as "0" (S220). 
Then, while the waiting counter for data is set as "0" (S230), the conditions about 
password collating are set up for "not collating" (S240). 

[0037] And the device check of whether to be able to perform an R/W operation normally 
to a flash memory 12 is performed first (S250). When the result of this device check is 
normal, (S260^YES) and the below mentioned down-load executive operation routine 
are started (S400). And when a down-load executive operation routine is completed 
normally, check processing to (S270-YES) and the main-program area 40 explained 
previously is performed (S100), when the result is normal, it returns to (S280^YES) 
powering on and a reset manipulation routine, and a main-program running routine is 
started. On the other hand, when the result of the device check in S260 is unusual 
(S260-NO), the singing of the loudspeaker 23 is carried out through the buzzer unit 15 
that it should report to ************ that a device is poor (S340). At this time, the sound 
which combined the height and the length of sound suitably is pronounced as sound 
emitted from a loudspeaker 23. Anyway, what is necessary is just to be able to tell an 
operator about the poor device having occurred. Then, reception preparations of a 
parallel port 24 are made (S350), and the waiting counter for data is set as "4" (S360). 



And a data reception is performed through a parallel port 24 so that it may mention 
later (S800). It reads and such data reception is thrown away until the received data 
stop, since it is carried out when a device is poor (S260^NO). 

[0038] Moreover, in the above S270, when a down-load executive operation routine does 
not terminate normally (S270-NO), and when the result of check processing to the 
main-program area 40 is unusual, in order to report the abnormalities in a (S280^NO) 
down load, the singing of the loudspeaker 23 is carried out by the buzzer unit 15 (S290). 
At this time, it is reported by ************ that the sound which combined the height 
and the length of sound suitably is pronounced like the above, and the abnormalities in 
a down load occurred as sound generated from a loudspeaker 23. And according to the 
mode of operation set up, it jumps to S220 or S310. 

[0039] Processing of S310-S330 which are performed here when the decision in the 
above S210 is update is a step performed when downloading a main program not as an 
initial load but as update. While a mode of operation is set as "1" in order to distinguish 
from an initial load when performing a down load of a main program as update, the 
deletion flag for making it distinguish that no sectors of a flash memory 12 are 
eliminated is set as "0" (S3 10). Then, while the waiting counter for data is set as "0" 
(S320), the conditions about password collating are set up for "collating" (S330). 
[0040] Next, a down-load running routine is explained according to the flow chart of 
drawing 9 . By this routine, the status that program data are receivable from a parallel 
port 24 is prepared first (S410). Then, in order to report down-load start, the singing of 
the loudspeaker 23 is carried out (S420), and it waits to receive a fixed character string 
(S430). Here, like the above, the singing of the loudspeaker 23 is carried out [ sound / 
which combined the height and the length of sound suitably ], and it is reported to it by 
the operator that the down load was started. If a fixed character string is received 
(S430:YES), it will judge whether the mode in which password collating is performed is 
set up (S440). As mentioned above, as mode of password collating, in the case of an 
initial load, "it does not collate" is set up (S240), and when it is update, "it collates" is set 
up (S330). 

[0041] Therefore, only within the case of update, a reception of a model and the 
password for country identification is performed, and it collates with the password 
stored in the applicable field 42 of the main-program area 40 (S450). And processing 
which reports through a loudspeaker 23 that the modality of main program chosen as 
an object for (S460-NO) update is wrong when the password is not in agreement (S470), 
and reads and throws away the received data is performed as a result of collating (S480). 
It is reported by the operator that the singing of the loudspeaker 23 at this time is 



performed to the sound which combined the height and the length of sound suitably, and 
its password does not correspond. 

[0042] On the other hand, as a result of collating, when a password is in agreement, 
processing which destroys the data of the concerned field 43 is performed by writing the 
character string of the content different from the completion mark of a loading in the 
field 43 to which (S460YES) and the completion mark of a loading are stored (S490). 
And after waiting to receive a start record (S500), the data for 1 sector are received 
(S510), and it judges whether it is among the boot area rewriting authorization mode 
based on whether the boot area rewriting authorization mode flag is set to ON (S512). A 
boot area rewriting authorization mode flag is OFF, and in not being among the boot 
area rewriting authorization mode (S512-NO), it judges whether the address of received 
data has the address outside a boot area (S514). And when the address of received data 
has the address outside a boot area (S514-NO), reading **** of received data is 
performed (S516). Then, it shifts to S560. 

[0043] On the other hand, in S512, when a boot area rewriting mode flag is ON and is 
among the boot area rewriting authorization mode (S512:YES), and when the address of 
received data is the address outside a boot area (S514:YES), it shifts to S520. In S520, 
the data in the field of 1 sector which should write in these received data are eliminated, 
and while a deletion flag is set as "1", the singing of the loudspeaker 23 is carried out 
like the above (S530). And the data for 1 sector which received by S510 are written in 
the sector from which the point eliminated (S540), and the singing of the loudspeaker 23 
is carried out like the above that it should report that writing was completed (S550). 
And 510 or less above-mentioned S processing is repeated and performed until it 
receives the last record (S560^NO). 

[0044] In this way, processing of S510-S560 is repeated, and all sectors are eliminated, 
carrying out the singing of the loudspeaker 23, whenever it eliminates one sector of the 
sectors which are not eliminated in (S560:YES), the boot loader area 30, or the 
main-program area 40, when the last record is received (S570). And it judges whether a 
checksum is right (S572), and when a checksum is not right (S572:NO), while resetting 
the after treatment (S574) which set the boot area rewriting authorization mode flag to 
ON, when a checksum is right (S572:YES), in order to report the completion of a down 
load, the singing of the loudspeaker 23 is carried out like the above, and it escapes from 
this routine (S580). At this time, it is terminated normally. Therefore, S270 is judged to 
be YES, performs main-program area check processing (S100), and progresses to 
processing which judges whether data downloaded correctly. 

[0045] Next, processing which receives data from the parallel port 24 performed with 



the above S800 is explained based on the flow chart of drawing 10 . In this reception, 
first, the waiting timer for data is set to predetermined time (to for example, 12 seconds) 
(S810), and it is judged whether received data exist (S820). When there are received 
data (S82CKYES), processing is ended after incorporating received data from a parallel 
port 24 (S830). Moreover, it waits for received data until it is judged whether the 
waiting timer for data set with the above S810 passed the deadline of (S840) and the 
waiting timer for data passes the deadline of (S840:NO), when it is judged that received 
data do not exist in S820 (S820:NO). 

[0046] When the waiting timer for data passes the deadline of (S840^YES), only 1 
carries out the increment of the waiting counter for data (S850), and it is judged 
whether the value of the waiting counter for data was set to "5" (S860). When the value 
of the waiting counter for data is not equal to "5" (S860:!=5), the after treatment (S870) 
to which the singing of the loudspeaker 23 was carried out like the above is ended. On 
the other hand, when the value of the waiting counter for data becomes equal to "5" 
(S860— 5), the set point of a deletion flag is distinguished as what the number of times 
of the waiting for data exceeded (S880). And when "1" is set as the deletion flag based on 
the flash memory 12 having been, and rubbing and that sector having been eliminated 
(S880:l), down-load executive operation is considered as abnormal termination, and it 
returns to S220 again. When this is in the status that a part of main program was 
destroyed especially in update, from it being abnormal termination in the middle of a 
down load and it is made to return to the status just behind powering on, it is for 
starting a down-load manipulation routine again from there being a possibility that 
equipment 10 may become unable to operate normally that a main program should be 
downloaded quickly. Moreover, when "0" is set as the deletion flag based on neither of 
the sectors of a flash memory 12 being eliminated (S880^0), it returns to powering on 
and a reset routine. It is because what is necessary is just to reperform from the 
beginning since it is the same as that of having not started the down load at all when 
the sector is not yet eliminated. 

[0047] Next, a main-program running routine is explained based on the flow chart of 
drawing 11 . By this routine, a boot area rewriting authorization mode flag is turned 
OFF (S590), and it stands by until there is a key input from the key on a control panel 
22 (S592). If there is a key input (S592:YES), the key input will judge whether it is the 
key input which demands change in the boot area rewriting mode (S594). When the key 
input has demanded boot area rewriting mode change (S594-YES), a boot area rewriting 
authorization mode flag is changed (S596). For example, conversely, when a flag is ON, 
if a flag is OFF, it will change into ON at OFF. 



[0048] On the other hand, when the key input has not demanded change in the boot 
area rewriting mode (S594-NO), it judges whether it is the key input from the rewriting 
mode key for rewriting a flash plate 12 (S598). When it is the key input from a flash 
memory rewriting mode key (S598-YES), the aforementioned down-load processing is 
performed. On the other hand, in not being the key input from a flash memory rewriting 
mode key (S598^NO), it performs other processings. 

[0049] That is, it judges whether PJL command was received from the exterior (S610), 
and when PJL command is received, (S610^YES) and the above-mentioned down-load 
manipulation routine are started (S200). This is in the status of update, and will be 
judged by S210 of a down-load manipulation routine to be update, and 310 or less S 
processing will be performed. 

[0050] On the other hand, when printing data are received, the printer unit 18 is 
controlled based on (S620^YES) and the received printing data, and printing processing 
is performed (S670). Moreover, when facsimile data are received through NCU21 and 
the modem 19, after decrypting by inputting the concerned facsimile data into 
(S630:YES), and a sign and a decoder 17, facsimile reception which prints and outputs 
the information which controlled the printer unit 18 and was received to a record form 
is performed (S680). Moreover, when the facsimile function is chosen in the control 
panel 22, data are read in the manuscript thrown into the (S640-YES) scanner unit 20, 
and this is inputted into a sign and the decoder 17, it encodes, and processing which 
controls the modem 19 and NCU21 and transmits facsimile data further is performed 
(S690). Moreover, when other functions, for example, a copy function etc., are chosen, 
processing which controlled the scanner unit 20, the printer unit 18, etc., and followed 
the selected function according to (S650) and the concerned selected function is 
performed (S700). The above processing is continued until power is turned OFF or a 
reset is performed (S660). 

[0051] In the multifunction device 10 which starts this operation gestalt as explained to 
the detail above When the boot area rewriting authorization mode flag is set to ON 
(S512:YES), the boot loader area 30 is rewritten according to the loader program data 
received from the external sending set through the receiving set (S520-S580), while 
constituting like When a boot area rewriting authorization mode flag is OFF (S512-NO, 
S514:NO) received data are read and thrown away, without rewriting the boot loader 
area 30 (S516), since it constituted like Only when the boot area rewriting authorization 
mode flag is set to ON It can prevent rewriting a boot loader program by the mistake 
certainly, without attaining rewriting of a loader program and taking the measures on 
hardware more complicated than this. 



[0052] Moreover, when it is judged that the address is the address outside a boot area 
based on the address of received data when a boot area rewriting authorization mode 
flag is OFF (S512:NO) (S514:YES), since received data are data, such as other programs 
other than a loader program, rewriting of such data is performed (S520-S580). Thereby, 
data, such as other programs other than a loader program, can be updated. 
[0053] In addition, the gestalt of this operation of the various enhancements in within 
the limits which does not limit this invention and does not deviate from the summary of 
this invention and deformation being possible is natural. For example, although the 
data received in a down load as both data for writing in which the model and the 
password for country identification as specification specialization data were included 
immediately after the reference data which accompany just before program data, and 
program data were constituted, you may make only the data for writing the 
configuration included in data, without making the data for reference accompany. 
However, once it reads program data, when performing password collating, it will be 
necessary to once hold the read program data to a buffer etc. Therefore, it can be said 
that the gestalt of above-mentioned operation is more advantageous practically in that 
the need of forming such a buffer [ especially ] by enabling password collating before 
reading program data is abolished. That is, the technique of using specification 
specialization data as reference data, and making it accompany before the control data 
for update can be called practically advantageous thing at the point which does not need 
useless storage capacity. 
[0054] 

[Effect of the Invention] this invention enables a setup in the rewriting mode which 
enables rewriting of the loader program data which control a loading operation of a 
main program as explained above. By permitting rewriting of the loader program 
storage area of storage according to the loader program data transmitted from the 
external sending set only when the rewriting mode was set up The data rewriting 
equipment which can be prevented certainly can be offered for rewriting a boot loader 
program by the mistake, without taking the measures on comp heated hardware. 



[Translation done.] 



